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DIRECTOR OF CENTRAL INTELLIGENCE 
Security Committee SECOM-D-714 


15 November 1979 


MEMORANDUM FOR THE RECORD 


FROM: 
SECOM Staff 


SUBJECT: Computer Security Subcommittee Meeting, 8 November 1979 


25X1A 


l. I represented the SECOM staff at subject meeting, 
|chaired by| | 29X1A 

opies of the minutes of the ctober subcommittee meetin 
were distributed (copy attached). They were used byf 


as a primary agenda for this meeting. 


2. [asked me if APEX had been approved. I 
said it had been in concept with some administrative matters 
yet to be resolved between the DCI and SECDEF. He asked me 
about APEX's applicability to COMINT. I said it provided 
that COMINT would not be decompartmented without Defense 
concurrence. 


a | i | of the January deadline 25X1A 
for submission of an annual report for the subcommittee and 
of the forthcoming SECOM mecting scheduled for 28 November. 


4. Members discussed EEIs being developed by the sub- 
committee to seek information on computer security threats. 
They also discussed file systems (e.g., DIAOLS) and search 
methodologies bearing on the identification of data pertinent 
fo their EELS. 
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5. Ld said he hoped to get the NSA personnel 
office to contract withL__| (apparently an NSA retiree 95x1A 
with expertise in computer security) to help them revise 
DCID 1/16. The DIA representative suggested that member 
agencies submit change proposals for review and use by the 
rewrite team. [asked for such by 15 December. 


6. [__———=éd said hee hoped it would become possible 
for one Community agency to accept a satisfactory industrial 
security inspection finding by another agency (vice duplicate 
inspections) when both have classified contracts with the 
same firm. He asked me to bring this to 25X1A 
attention for any bearing it might have on revision of the 
1973 USIB physical security standards. 


7. The Army member distributed and discussed a 
memorandum (copy attached) on the security of word processing 
systems. 


8. (eee referred to the second draft of DCID 1/11 
which does not include his earlier suggestion that the sub- 
committee's functions be expanded to include information 
"communicated" by computer. He said he feels strongly 


that this is needed, since he considers security standards 
for computer communication of classified data to be less 


stringent than for processing or storing the same or similar 25X1A 
data in computers. aoe said he_planned to state his 
case at the 28 November SE meeting. suggested 

the possibility of DCI standards for security protection of 25X1A 


SCI in all computer environments, including communications. 


9. The next subcommittee meeting was scheduled for 
0930, 6 December, at the[ 2BX1A 


25X1A 


Attachments 
Distribution: 


Orig - SECOM Subject w/atts 
1 - SECOM Chrono wo/atts 


seeow[ 11/18/79) 
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